CVE-2014-2276: The FileUploadController servlet in EMC Connectrix Manager Converged Network Edition (CMCNE) before 12.1.5...

Security readout for executives and security teams

CVE-2014-2276 is an information disclosure flaw in EMC Connectrix Manager Converged Network Edition before 12.1.5. A remote attacker could abuse the firmware import path to add crafted content to the manager repository and obtain sensitive information. The public bundle does not provide CVSS scoring. Exposure appears limited to organizations still operating EMC Connectrix Manager Converged Network Edition versions earlier than 12.1.5. Risk depends on whether the CMCNE management interface and firmware import functionality are reachable by untrusted users or networks. Treat this as a legacy infrastructure hygiene issue unless CMCNE is exposed to untrusted networks. Prioritize discovery, vendor-supported upgrade decisions, and access restriction because the public data lacks severity scoring but describes remote information disclosure. Mitigation focus: Inventory CMCNE deployments and identify versions earlier than 12.1.5.; Check EMC/Dell advisory ESA-2014-018 for supported remediation guidance.; Plan upgrade or retirement for unsupported CMCNE instances..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.